Privacy Policy

Foamo Surf Analytics LLC ("foamo," "we," "us," or "our") operates the foamo website and services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service.

By using the Service, you agree to the collection and use of information as described in this policy. This Privacy Policy is incorporated into and governed by our Terms of Service.

We process your personal information where necessary to perform our contract with you, comply with legal obligations, and for our legitimate business interests in operating and improving the Service.

Account Information. When you create an account, we collect your email address and, optionally, your name. If you sign in with Google or Apple, we receive the information those services provide, which typically includes your name and email address.

User Preferences. We store your saved favorite surf breaks and any account preferences you configure.

Usage and Technical Data. We automatically collect certain technical information when you use the Service, including IP addresses, browser type, device type, operating system, pages visited, and timestamps. This data is collected through our hosting provider (Vercel) and analytics tools described below.

Payment Information. If you subscribe to Pro, payment processing is handled entirely by our third-party payment processor (Stripe). We do not collect or store your credit card number or payment card details. We may receive limited non-sensitive billing information such as your subscription status, last four digits of your card, and billing country.

Communications. If you contact us at support@foamo.io, we retain those communications to respond to your inquiry and improve our support.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Process subscription payments and manage your Pro access
• Save your favorites and personalize your experience
• Analyze usage patterns to improve the Service and the SLAM forecasting model
• Respond to your support requests and communications
• Send transactional communications such as verification codes and account notices
• Send marketing and product update emails, where you have not opted out (see Section 8)
• Comply with applicable legal obligations

We do not sell your personal information or share it for cross-context behavioral advertising as defined under the CCPA/CPRA. We share information only in the following limited circumstances:

Service Providers. We share information with trusted third-party service providers who assist us in operating the Service:

• Supabase — authentication, user data storage, and database services
• Vercel — hosting, content delivery, and usage analytics
• Google Analytics — website usage analytics (currently being implemented)
• Stripe — payment processing for Pro subscriptions
• Railway — backend API hosting and infrastructure
• Resend — transactional and marketing email delivery

These providers are authorized to use your information only as necessary to perform services on our behalf and are bound by confidentiality obligations.

Data Sources. foamo uses third-party data sources to power surf forecasts, including Open-Meteo and NOAA. These are data providers only — no personal information about you is shared with or transmitted to them.

Legal Requirements. We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers. If foamo is acquired, merges with another company, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you of any such change via email or a notice on the Service.

Your information may be processed and stored in the United States and other jurisdictions where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. We take reasonable steps to ensure that any such transfers comply with applicable law and that your information remains protected.

We use cookies and similar tracking technologies to operate the Service. Specifically:

• Authentication cookies — set by Supabase to maintain your login session. These are necessary for the Service to function and cannot be disabled.
• Analytics cookies — set by Vercel Analytics and Google Analytics to help us understand how users interact with the Service. These collect de-identified usage data.

We do not use advertising cookies or tracking pixels for targeted advertising. You can configure your browser to refuse cookies, though this may affect the functionality of the Service.

Do Not Track / Global Privacy Control. Some browsers offer a "Do Not Track" (DNT) signal. At this time, we do not respond to DNT signals. However, we recognize Global Privacy Control (GPC) signals where required by applicable law.

We retain your account information for as long as your account remains active. If you request deletion of your account, we will delete your personal information within a reasonable time, except where we are required to retain it for legal or legitimate business purposes (such as resolving disputes or complying with legal obligations).

Aggregated and de-identified data that cannot reasonably be used to identify you may be retained indefinitely for analytical purposes.

We take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse, including encrypted data storage and transmission via HTTPS. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.

We may send you product updates, new feature announcements, and other marketing communications by email. You can opt out of marketing emails at any time by clicking the unsubscribe link in any email we send, or by emailing support@foamo.io. You cannot opt out of transactional communications such as verification codes or account-related notices.

You have the following rights regarding your personal information:

• Access. You may request a copy of the personal information we hold about you.
• Correction. You may update your name and email address directly in your account settings.
• Deletion. You may delete your account directly from your account settings, or contact us at support@foamo.io.
• Portability. You may request a copy of your data in a portable format.

To exercise any of these rights, contact us at support@foamo.io. We may need to verify your identity before fulfilling your request. We will respond within 30 days, or as otherwise permitted by applicable law.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know. You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete. You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct. You have the right to request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing. We do not sell your personal information or share it for cross-context behavioral advertising as defined under the CCPA/CPRA.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights.

To submit a California privacy request, contact us at support@foamo.io with the subject line "California Privacy Request." We may need to verify your identity before processing your request.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe we have inadvertently collected such information, please contact us at support@foamo.io.

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page. Your continued use of the Service following any changes constitutes your acceptance of the updated policy.

Questions or concerns about this Privacy Policy? Email us at support@foamo.io.